Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2024-58317

Kentico Xperience <= 13.0.164 Cookie Security Configuration

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

A cookie security configuration vulnerability in Kentico Xperience allows attackers to bypass SSL requirements when setting administration cookies via web.config. The vulnerability affects .NET Framework projects by incorrectly handling the 'requireSSL' attribute, potentially compromising session security and authentication state.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kentico Xperience

  • 0 to ≤ 13.0.164affected

References